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To. 


The Station House Officer. 
Madhapur Police Station, 
Hyderabad 


Sir. 


Sub: 


1. We have received a communication dated 15.03.19 from 1C of Police, West '/.one, 
Hyderabad, the communication stales as lollows:- 


reference to the subject ami reference cited, it is to submit that an the complaint aj Sri 
T.l.okeswara Reddy R/a Hyderabad about the illegal access and fraudulent use of sensitive 
identity information such as Aadhaar Number Voter Identity details including colot 
photographs, beneficiary details of various Government Schemes and the data related to 
surveys conducted by the Government of Andhra Pradesh were misused by IT GRIDS (INDIA) 
Pvt. Ltd. Hyderabad through "Seva Mitra Application", a case vide reference 1st cited was 
registered on 02.03.2019 ami the same is now being investigated into by Special Investigation 
Team, constituted vide reference 2nd cited. 

Investigation so far revealed that Seva Mitra Application is suspected to be using stolen voter 
information along with Aadhaar data of the State Governments of Telangana and Andhra 
Pradesh for voter profiling, targeted campaigning and even deletion of votes. 

During the course of investigation, search was conducted in the premises of IT GRIDS (INDIA) 
Pvt Ltd on 02/03/2019 & 03/03/201 9, 7 Hard Disks and other digital evidence were seized 
from the scene of crime. The seized digital evidence was sent to Telangana State forensic 
Science Laboratory (TSFSL) for forensic examination. TSFSI. in its preliminary report has 
stated that "data related is huge in the material objects and requires extensive analysis". 
Moreover the report of TSFSL has categorically stated that the seized Hard Disks contain a 
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database of a large number of records pertaining to Aadhaar number in a partiaiia 
structural database. 


Strengthening the suspicion, upon further examination of the digital evidence it was 
discovered that a whopping 78221397 records of Aadhaar data belonging to the states of 
Telangana and Andhra Pradesh were found and used by IT GRIDS (INDIA) Pvr Ltd for the 
purpose of Seva Mitra Application belonging to Telugu Desam Party. Further, it is also 
pertinent to bring it to your notice that the structure and sue of the database is surprisingy 
similar to that of databases that could have been originally owned by Unique Identification 
Authority of India. 

In the course of Investigation, records of the following five persons 

• Muddanalaligari Jayamohan Reddy (Aadhaar No. XXXX XXXX3340) 

• Akkala Maddileti Reddy (Aadhaar No XXXX XXXX 8414) 

• Akula Ravi Kumar ( Aadhaar No. XXXX XXXX 7063) 

• Abdas Venkata Pratap ( Aadhaar No. XXXX XXXX 8041) 

• Complainant: Thummala Lokeswara Reddy (Aadhaar No. XXXX XXXX 1523) 

furnished by the complainant were verified by TSFSL and records of above five members were 
found in the seized hard disks having following fields 

• UID.NUM 

• EID.NUM 

• CITIZEN_ NAME 

• FA TH E R. H USB A N D_ GUARDIAN_ NAME 

• DOB_ DT 

• VILLAGE NAME 

• MAN DAL NAME 
. DISTRICT. ID 

. DISTRICT NAME 

• PIN CODE 

• VTC_CODE 

• VTC_ NAME 

. CITIZEN _ PHONE NO 

• GENDER 

• STATECODE 

• STATEN AME 

• CITIZEN_ NAME_ LOCAL 

• CAREOE. NAME. Local 

The sample records certified by TSFSL are enclosed. 
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either from Central idem, ■ ■ n , • * wsp ' a '"' lhcu ll ' L ‘ da ‘° coM (rare been obtained 

(SRI)ll) alianed to dim A D ? t °fepository lCmR) or one of the State Resident Data Hobs 

indicates that the accost r° 6 " “ y ° f SUCh UnlqUe °f <"> Aadhaar Number 

used such information nr IT I 'V™ mqh } , have ‘"T" 1 ' acassed CIDR or s,m °"d bos 
sensitive diitahnvo ata ° r wron ^Ail U am - ^ )e accused is in possession of such a 

38(h) of Audit n - it U,enumih,e Murage, which is in contravention of Section 38(g), Section 

Act 2016 Sera 1 ' Jn'^i^ l)el,very °f Fin °ncial and other Subsidies, benefits and services) 
* ' iett,on 40 ancf Section 42 of Aadhaar Act, 2016. 

Hmorrnl 7 believed that Identity Information related to Aadhaar is being used by 

with hpn C >r’ W W IS J ,CClor 1 GRIDS (INDIA) Pvt Ltd for the purpose of mapping of voters 
r ,,,, 1 L ' ,Uancs °t various Government Schemes and results of surveys conducted bv the 
contravention of the Section 29 (3) of Aadhaar (Targeted Delivery of Financial 
ana other Subsidies, benefits and services) Act, 2016. Moreover, illegal access and possession 
oj sensitive identity information of Aadhaar with a private entity is in violation of Sec 72(A) 

Section 65 and Sec 66(11) of IT Act, 2008. 


It is also relevant to bring it to your notice that as per Aadhaar (Sharing of Information) 
Regulations, 2016, there are stringent restrictions on sharing, circulating or publishing of 
Aadhaar Number. However, the Directors of IT Grids (INDIA) Pvt Ltd are suspected to have 
hosted databases related to Aadhaar number and related identity information in Amazon 
lV»?b Services, which is in clear contravention of Rule 6(4) of above mentioned regulations 
The evidence gathered so far points to the fact that the accused has hosted the Aadhar 
database in Amazon Web Services, USA in contravention of Section 44 of Aadhaar Act. 2016 
Further, it is strongly suspected that the accused could have illegally stored Aadhar database 
of not only Telangana and Andhra Pradesh but possibly of few other States in a offshore 
storage facility. There is every possibility that sensitive data of Indian citizens could be 
accessed and used by countries hostile to India or International Organised crime syndicates in 
a manner which could seriously be detrimental to National Security. 


In light of gravity of the offences committed by the accused, it is felt that complaints filed by 
individual residents that their Aadhaar data is being misused will not suffice as UIDAI is the 
ultimate custodian of all Aadhaar related data and Sec 44 of Aadhar Act 2016 applies to 
offences occurring outside India. Hence it is felt that a comprehensive complaint needs to be 
filed by UIDAI and concomitant legal proceedings also need to be initiated by the Authority.'' 


2. In light ol facts stated above, an FIR may kindly be registered at the earliest against the 
suspects and further necessary legal action may be initiated under the relevant provisions 
ol the law. 


Sincerely, 


tCetei-vta ov v \x- n- Wr M. 

- -TTV TWjhwt> 

Ax 0 ( 5 ^ OV (TV Bhavam Prasac 

’ ^ ^ \ L— y\ UtcuJ- De P ut >' Dirctu 

I 'i,6 »-V lw30 l , 
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